US sanctions VPN, malware providers for enabling ransomware attacks

Provenance

Claims tie surfaced fields back to sources, models, or heuristics.

• severity.upliftheuristicn/a
  Active exploitation / in-the-wild language detected — floor raised to at least high.
• severity.upliftheuristicn/a
  Ransomware campaign indicators detected — floor raised to at least high.
• severity.upliftheuristicn/a
  Combined zero-day/exploit + ransomware/mass-impact signals → critical.

What changed

Append-only revisions when ingest or analysts evolve the record.

No revision rows stored yet.

Sources

• https://www.bleepingcomputer.com/news/security/us-sanctions-vpn-malware-providers-linked-to-ransomware-gangs/